---
- name: Ensure group exists
  become: true
  ansible.builtin.group:
    name: "{{ cv4pve_user_group }}"
    state: present
  when:
    - cv4pve_user_group is defined

- name: Ensure user exists
  become: true
  ansible.builtin.user:
    name: "{{ cv4pve_user }}"
    group: "{{ cv4pve_user_group }}"
    shell: /usr/sbin/nologin
    create_home: false
  when:
    - cv4pve_user_group is defined
    - cv4pve_user is defined
...